Privacy Policy

This policy explains how DigiGram Ventures Ltd. ("DigiGram", "we", "us") collects, uses, stores, shares and deletes personal information. It covers digigramventures.com and our mobile applications — Shathi (for investors) and Shathi Sheba (for farmers and rural entrepreneurs) — together referred to as the platform.

DigiGram Ventures Ltd. is the data controller. You can browse the public parts of the website without giving us any personal information; an account is needed only to invest, to apply to a project, or to buy and sell.

Account and profile — your name, mobile number, email address, date of birth, gender and profile photograph. Your mobile number is verified with a one-time SMS code; an email address verified through Google sign-in is recorded as verified.

Identity verification — your National ID number and photographs of the front and back of your NID card. These are required before an investment can be confirmed, and are reviewed by our verification team.

Financial — the bank name, branch and account number you register for payouts, and any payment receipt or proof of transfer you upload against a booking.

Activity — the projects you fund or apply to, your bookings, units held, applications, listings, orders, training progress and messages you send us.

Location — the division, district and upazila on your profile, used to show projects and services available in your area. We do not collect continuous or background GPS location.

Device and technical — device model, operating system, app version, IP address, a push-notification token for sending you alerts, and non-identifying analytics about how pages and screens are used.

Sign-in identifiers — where you sign in with Google or Apple, we receive the account identifier, and the name, email address and avatar those services release to us. We never receive your Google or Apple password.

To create and secure your account and sign you in; to verify your identity as the law requires before an investment is confirmed; to process bookings, payments and payouts; to show you the projects and services relevant to your area; to send transactional messages such as one-time codes, booking confirmations and project updates; to answer your enquiries; to meet legal, tax and anti-money-laundering obligations; and to keep the platform working, secure and free of abuse.

In Shathi Sheba, the information you provide also produces your readiness assessment — a risk grade, a readiness status and a recommended next step. This is decision support shared with a lender only when you apply. It is not an automated credit decision: a licensed lender makes that.

Service providers who act on our instructions only: Amazon Web Services (hosting, file storage and email delivery), Google Firebase (push notifications), BulkSMSBD (one-time codes and SMS alerts), and Google and Apple for the sign-in you choose to use.

Banks, MFIs and other licensed lenders — only the application pack for a project you have chosen to apply to, and only when you apply.

Cooperatives and field officers who verify profiles and monitor projects on the ground, limited to what they need to do that work.

Authorities, where the law or a valid legal process requires it, or to protect our rights or someone's safety. We will tell you where we are legally permitted to.

We do not sell, rent or trade your personal information, and we do not share it with advertising networks or data brokers. Where we publish anything about an investor's participation for promotional purposes, we ask that investor's permission first.

You can request deletion of your account and personal data at any time — from Menu → Delete account inside the app, at digigramventures.com/delete-account, or by emailing tech@digigramventures.com from your registered address. We confirm the request with a code sent to your registered mobile number or email.

On deletion we remove your profile, your NID images and number, your profile photograph, your bank details and your push-notification token. Your account can no longer be signed into.

Two things we must keep. Records of completed financial transactions are retained for the period Bangladesh's tax, accounting and anti-money-laundering rules require. Where you have an active funding cycle, the account cannot be deleted until that cycle closes and any balance is settled — we will tell you if this applies and delete the account once it does not.

We keep your information for as long as your account is active, and afterwards only for as long as we need it to meet legal, tax, accounting or regulatory obligations, or to resolve a dispute. Analytics data is kept in aggregate and is not linked back to you.

Traffic between your device and our servers is encrypted in transit. Sessions use a signed token rather than a stored password — we never hold your password, because we never create one. Access to identity documents and bank details is limited to the staff whose work requires it.

No system is perfectly secure. If a breach affects your personal information we will notify you and the relevant authorities without undue delay.

You can ask us for a copy of the personal information we hold about you, ask us to correct anything inaccurate, ask us to delete your account, or object to a particular use. Most profile details can be corrected yourself in the app or on the website. Write to tech@digigramventures.com and we will respond within 30 days.

You can turn off push notifications in your device settings, and unsubscribe from our newsletters using the link in any of them. Transactional messages — one-time codes, booking confirmations — continue, because they are part of the service.

The platform is not intended for anyone under 18 and we do not knowingly collect information from children. If you believe a child has given us personal information, write to tech@digigramventures.com and we will delete it.

The website uses a small number of cookies: one to keep you signed in, one to remember your language, and Google Analytics to count visits and see which pages are read. Analytics runs only on the production site. You can refuse cookies in your browser, though the signed-in area will not work without the session cookie.

The session cookie is httpOnly, so no script on the page can read it.

The platform links to sites we do not control, including app stores and partner websites. Those sites have their own privacy policies and we are not responsible for their practices.

We may update this policy from time to time. The current version is always published here with the date it was last changed. Where a change materially affects how we use your information, we will tell you in the app or by email before it takes effect.

DigiGram Ventures Ltd., Level 4, 27 Shaptak Square, Road 27 (old) / 16 (new), Dhanmondi, Dhaka-1205, Bangladesh. Privacy and data requests: tech@digigramventures.com. General enquiries: info@digigramventures.com, telephone +880 1761 720 230.